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ABSTRACT 


Using  a  lower  tolerance  bound  as  the  derated  life  provides  a 
guaranteed  service  period  with  the  confidence  level  as  a  measure  of 
safety  in  situations  where  mass  production  is  contemplated.  However, 
when  only  a  limited  number  of  items  are  to  be  produced,  the 
probability  of  no  failures  among  the  fleet  of  specified  size  provides 
a  better  measure  of  assurance.  Assuming  that  the  life  distribution  is 
one  of  a  specified  set  of  subclasses  of  those  distributions  which  have 
increasing  failure  rates  we  find  those  derating  functions  which  can  be 
used  to  provide  lower  tolerance  bounds  of  given  confidence  or  a  safe 
service  life  with  specified  fleet  assurance. 

A  method  of  finding  such  derating  functions  is  exhibited  and  the 
calculation  of  a  lower  bound  for  the  probability  of  no  failure  in  the 
fleet  is  carried  out  when  such  derating  functions  are  used.  The 
confidence  in  the  tolerance  bound  and  the  assurance  of  no  fleet  failure 
are  compared  when  using  bounds  obtained  from  these  derating  functions. 


1.  INTRODUCTION 


Suppose  we  have  a  structural  component  in  an  airplane  which  is 
subject  to  failure  from  fatigue,  perhaps  due  to  the  cyclic  loading  of 
the  ground-air-ground  cycle,  to  acoustic  loading  or  to  some  other  well- 
defined  and  reconstructible  phenomenon.  We  ask  what  estimate  can  we 
make  of  a  safe  service  period,  or  more  specifically,  the  lower  quantiles 
of  the  distribution  of  the  time  until  failure,  from  the  testing  of  a 
small  number  of  specimens  under  simulated  conditions  within  the  laboratory. 

The  first  question  with  which  we  concern  ourselves  is,  what  is  the 
probability  that  the  weakest  component  within  a  fleet  of  airplanes  will 
fail  before  the  time  established  by  derating  the  life  estimated  from  the 
simulated  testing.  The  problem  is  to  determine  the  derating  procedure,  by 
which  we  mean  a  derating  function  depending  upon  the  test  sample,  so  that 
there  is  little  probability  of  failure  within  the  fleet. 

We  let  X_^  m  be  the  i^  ordered  observation  of  m  independent 
observations  resulting  from  the  simulated  testing  within  the  laboratory 
and  we  let  ^  be  the  i^  ordered  observation  of  the  n  components 
in  service  within  the  fleet.  We  assume  that  the  lives  simulated  in  the 
laboratory  have  the  same  distribution  is  the  actual  service  lives.  This 
means  that  the  ordered  observations  obtained  are  from  independent  and 
identically  distributed  random  variables  with  the  same  distribution,  which 
we  call  F. 

From  the  laboratory  testing  we  have  the  data  X  *  (X,  , . . . ,X  )  which, 

~  l,m  m,m 

together  with  a  specified  derating  function  d,  we  can  use  to  obtain  the 
derated  (or  guaranteed)  life  d(X).  The  probability  that  no  more  than  k-1 


out  of  n  failures  occur  in  the  fleet  before  the  derated  life, 
k  ■  l,...,n,  we  call  the  fleet  assurance,  labeled  ot(k)  and  it  is 
given  by 


a(k)  -  P[Y  >  d (X)  ] . 


Since 


Pt\,n  > 


k-1 

U“F(y>  ]n"J 


-  oo 

•  *o  L 


-z.  k-1  -(n-*k+l)z, 
(1-e  )  e  dz 


where  Q  ■  -2n(l-F), 


we  have,  letting  G  be  the  joint  distribution  of  the  sample  £ 


a(k)  -  k(J)  f  I”  (l-e'Z)k"1e"(n-k','1)zdz  dG(x) . 


Jx  ^Qd(x) 


For  the  applications  that  we  consider  here,  we  shall  only  be 
interested  in  the  case  k  ■  1.  So  that  we  omit  k  and  write 

(1.1)  a  «  /  e-nQd(x>dG(x). 

x 

The  event,  no  failure  in  the  entire  fleet  before  the  derated  life,  is 
the  only  event  which  seems  to  provide  assurance  in  the  ordinary  sense 


to  customers. 


< 

’  -  -  - 
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A  usual  method  of  quality  assessment,  applicable  to  the  diameter 
of  machined  parts,  etc.,  is  that  of  a  tolerance  bound.  We  include  this 
for  purposes  of  comparison  even  though  it  is  not  of  primary  interest 
to  us. 

The  probability  that  a  proportion  of  at  least  6  of  all  future 

s 

observations  will  not  fail  before  the  derated  life  we  call  the  confidence , 
in  order  to  be  distinguished  from  the  other  measure  of  safety.  We  write 
this  as 

(1.2)  Y  =  P[l-F(dX)  >  3]. 

where  we  here  establish  the  convention  that  juxtaposition  of  functions 
indicates  composition. 

In  this  interpretation  the  derated  life  is  a  lower  tolerance  bound 
for  the  population  described  by  the  distribution  F,  and  the  confidence 
level  y  of  the  lower  tolerance  bound  dQ()  in  our  designation  does 
not  depend  upon  the  fleet  size. 

In  order  to  introduce  the  fleet  size,  one  might  ask  that  the  proportion 
of  all  future  fleets  of  size  n  which  have  their  first  failure  occurring 
after  the  derated  life  d(X)  be  at  least  6.  But  this  we  see  becomes 
merely 

P[[l-F(d£)]n  >  6J 

which  is  (1.2)  with  p  replaced  by  B^n. 

Our  problem  is  to  choose  the  function  d  so  that  we  can  be  sure  the 
measures  of  safety  which  we  have  chosen,  namely  a  and  y»  are  sufficiently 
near  one,  keeping  in  mind  the  economic  desirability  of  using  as  few  of  the 
first  ordered  observations  as  possible. 
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2.  THE  MINIMUM  OBSERVATION 

For  a  nonnegative  random  variable  X  with  density  f  and 
distribution  F,  the  hazard  rate  (failure  rate)  q  is  defined  by 

q(t)  -  for  F(t)  <  1. 

Hence 

t 

Q(t)  »  /  q (x)dx  -  -in[l-F(t) ] 

0 

is  called  the  emulative  hazard ,  or  more  simply,  the  hazai-d. 

Some  nonparametric  classes  which  have  been  studied  previously  are 
hazard  rate  increasing:  labeled 

IHR  -  {q:  q(t)  is  increasing  on  0  <  t  <  «} 

and  hazard  rate  increasing  on  the  average:  labeled 

IHRA  ■  {q:  is  increasing  on  0  <  t  <  <*>}, 

where  we  use  increasing  in  the  weak  sense  i.e.  q(t^)  <_  q^)  for  t^  <  t 
In  this  connection,  see  [2],  [3],  and  the  bibliography  given  there. 

These  two  classes  are  thought  to  represent  the  appropriate  classes  of 
life  lengths  for  which  wearout  should  be  considered. 


It  has  been  pointed  out,  see  [6],  that  the  log-normal  distribution  has 
a  hazard  rate  which  does  not  increase  for  all  t  >  0.  As  a  matter  of  fact, 
a  simple  calculation  shows  that  it  is  not  in  the  IHRA  class  either.  In 
many  people's  opinion  this  is  sufficient  reason  to  discredit  it  as  a 
representation  for  life  length.  However,  it  is  still  used  in  fatigue  studies  [7]. 

Another  distribution  which  has  recently  received  much  attention 
and  has  been  applied  to  fatigue  problems  is  the  Weibull  distribution: 
this  has  a  hazard  of  the  form 


(2.1) 


t  >  a 


=  0 


t  <  a 


where  a  is  the  certain  life  (time  before  which  no  failure  can  occur) 
and  b  is  a  measure  of  the  central  tendency,  and  k  is  the  shape 
parameter.  See  [6],  [7]. 

It  has  been  said  that  the  range  of  k  which  is  applicable  to 
fatigue  lives  is  2  <  <  <  5  (see  [5]). 


To  indicate  the  direction  in  which  our  investigation  will  proceed, 
we  set  out  for  later  comparison  the  special  case  in  which  the  derating 

function  is  proportional  to  the  minimum  observation, 

(2.2)  d(X)  *pX.  0  <  p  <  1. 

~  l  ,m 


Hence  from  (1.1)  we  have 
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(2.3.1)  a 


>  pX 


m  f  exp{-nQ(px)-mQ(x) }a(x)dx 
0 


and  from  (1.2) 

I  ’Q(pXl  1 

(2.3.2)  Y  -  P[e  1,m  >  B J. 


Notice  that  If  we  make  the  IHRA  assumption,  namely, 

■0-^-  is  increasing,  then  Q(pt)  <_  pQ(t)  and  we  obtain  an  immediate  lower 
bound  for  y.  However,  we  can  obtain  another  bound  by  strengthening  our  assumption. 

If  is  increasing,  then  q(pt)  £  pq(t)  and  by  integrating  we  obtain 

Q(pt)  £  p2Q(t) . 

While  if  q * (0)  ■  0  and,  say, 

is  convex  increasing,  then  q(pt)  £  p2q(t)  from  which  follows 


Q(pt)  £  p  Q(t) . 


(Note  that  we  use  only  the  fact  that  q(t)/t‘ 


is  increasing.) 


Let  us  introduce  the  notation:  for  <  £  0 

q  e  SK  iff  is  increasing  for  0  <  x  <  » 

x 

q  e  C  iff  -3^1  £S  convex  increasing  and  lim  -S-kil  ■  q. 

K  xK  x+0  xK 

Then  we  have  almost  immediately 

THEOREM  1.  If  q  e  C^_2  or  q  e  S  ^  for  some  ic  £  2,  then  using 
the  derating  function  of  (2.2)  we  have 


a 


> 


1 


1 


< 

P 


y  >  1  -  g(m/P'C) 
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and  there  exist  failure  rates  in  C  .  U  S  ,  for  which  these  bounds 

<-2  <-l 

are  attained. 

Proof.  Since  for  a  e  S  .  U  C  .  it  follows  that 
-  k-1  <-2 

Q(px)  <  pKQ(x) 

by  simply  substituting  into  (2.3.1)  and  (2.3.2)  and  integrating  we  obtain  the 
bounds  given.  Equality  is  obtained  when  Q(x)  *  axK  for  some  a  >  0.  |  [ 

3.  THE  GENERAL  DERATING  FUNCTION 

Let  q  be  the  unknown  failure  rate  of  the  distribution  from  which 
we  obtain  our  sample  and  let  r  be  a  known  failure  rate.  Sometimes  it 
is  reasonable  to  assume  that  q  has  at  least  as  strong  a  behavior  as  r 
in  that  the  ratio  q/r  has  some  specified  behavior.  Because  the  hazard 
rate  has  the  intuitive  interpretation  of  the  force  of  mortality,  it  seems 
to  carry  a  certain  feeling  of  understanding.  The  classification  of  ran¬ 
dom  variables  by  the  behavior  of  the  ratio  of  their  failure  rate  with  that 
of  a  known  function  is  the  point  of  view  that  we  adopt. 

For  any  positive  functions  f  and  r  defined  on  (0,«)  we  say 

(3.1)  f  e  Sr  iff  (f/r)  is  increasing 

(3.2)  f  e  C  iff  (f/r)  is  convex  increasing  and  lim  f/r  ■  0. 

r  0+ 

In  the  special  case  where  r(x)  ■  x  for  some  k  >  0,  we  shall 
write  and  respectively  so  as  to  agree  with  our  previous  notation. 
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Note  that  by  definition 


Q  €  CQ  iff  q  is  IHR 


and  also  by  definition 


Q  e  S±  iff  q  is  IHRA. 

o 

Thus  our  comments  show  that  the  classifications  which  we  introduce 
are  particular  subclasses  of  the  IHR  and  IHRA  distributions.  We  shall 
show  this  relationship  more  fully  in  the  following  remarks. 

First  note  that  if  f  t  S^,  then  f  is  said  to  be  star  shaped , 
see  [4].  Now  this  property  is  intermediate  to  increasing  and  convex 
increasing:  that  is,  D  D  Cq.  One  might  think  that  this  would 
allow  us  to  Introduce  another  classification,  namely 

f  c  I  iff  f/r  e  S^, 

but,  in  fact,  letting  e  denote  the  identity  function,  we  see 


(3.3) 


I 

r 


S 

e 


•r 


t 


since 
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-  e  S.  iff  — ^ —  is  increasing  iff  f  e  S 
r  1  e*r  e*r 


We  will  now  derive  some  relationships  between  these  classes  for  the 
case  we  consider  to  be  of  prime  importance,  namely,  when  r  is  a  known 

oo 

failure  rate  such  that  r(0)  _>  0,  r(x)  >  0  for  x  >  0  and  j  r(t)dt  = 


'0 


Now  define 


(3.  A) 


R(x)  =  /  r (t)dt , 
0 


R#(x) 


/  t *r(t)dt . 
0 


We  now  have 


Remark  1. 


Q  e  SR  iff  OR"1  e  S  . 


Proof.  Since  y  =  R  ^(x)  is  an  increasing  transformation. 


^  x  ^  *s  increas^n8  in  x  iff  R^y)^  *s  increasin8  in  y  -  |  | 

Remark  2.  q  e  S  iff  OR  ^  t  C„. 

-  ^  r  0 

Proof.  Let  4>  »  QR  Now  consider  the  right-hand  derivative 
$>'  =  q(R  *)/r(R  1);  again  set  y  «  R  ^(x)  and  is  increasing  in  y 

iff  i' (x)  is  increasing  in  x  iff  $  is  convex. || 

This  leaves  the  reader  with  the  obvious  question:  what  about  the 

relationship  between  q  e  C  and  Q  e  Cd?  We  can  only  say,  since 

r  k 

C  =  Sg>r  that  Remarks  1,  2  provide  necessary  conditions. 

We  now  state  a  result  due  to  A.  W.  Marshall. 
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Lemma  1. 
condition  that 


For  a  signed  measure 


fdu  >  0 


for  all 


Cr»  or  is,  respectively. 


y  a  necessary  and  sufficient 
f  in  one  of  the  given  classes 


(3.4.0. 1)  f  e  Cr  :  for  all  t  >  0 

(3. 4. 0.2)  f  e  Sr  :  for  all  t  >  0 


/ 


(x-t)r(x)dy(x) 


t 

GO 


>  0. 


>  0 


Proof.  We  sketch  the  ideas  only.  We  first  introduce  the 

notation  £ft(x,t)J  for  the  indicator  function  of  the  relation  ft, 

being  one  if  true  and  zero  otherwise.  Consider  SqJ  the  function  of 

x  0  defined  by  1 1  is  in  Sn  for  any  t  >  0.  Hence  we  must 

have  /  {x  ^  tjdy(x)  * 

0 

On  the  other  hand,  any  f  e  Sq  can  be  approximated  by  an  increasing 
sequence  of  linear  combinations  of  such  step  functions.  By  using  the 
monotone  convergence  theorem,  the  condition  is  sufficient,  also.  To 
obtain  the  proof  for  we  multiply  and  divide  under  the  integral  by 

r  and  we  apply  the  result  just  shown  to  f/r  e  Sq,  changing  the 
measure  appropriately.  In  the  same  way,  linear  combinations  of  functions 
of  x  >  0  of  the  form  (x-t)  Cx  >_  tj  for  any  t  >  0  are  dense  in 
Cq,  and  can  be  used  to  obtain  the  results  quoted.  |  | 


J  dy  >_  0.  So  the  condition  is  necessary, 
t 


We  wish  to  discover  a  derating  function  d  such  that 
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Q[d(x)]  <_  ulQCXj^),.. .  >Q(xjn)]. 

For  reasons  of  simplicity  we  restrict  our  attention  to  functions  m 

which  are  linear  combinations  of  its  arguments.  Hence  for  some  real 

m 

ai  we  have  .  • .  ,ym)  =  J]aiyi> 

We  comment  that  the  next  theorem  and  its  corollaries  have 
much  in  cotm,  on  with  some  of  the  results  stated  in  [1]  which  are  to 
be  proved  in  a  forthcoming  report  by  the  same  authors.  We  give 
the  proofs  since  they  follow  easily  from  the  lemma  of  Marshall. 


THEOREM  2.  Let  0  <  x.  <•••<  x  <®  be  arbitrary.  Let 

I  m 

a,  =  A,  -  A,,.  for  1-1, . . . ,m-l,  a  *  A  where 
j  j  J+-L  m  m 


(3.4.1) 


0  <_  Aj  1  for  j*l, . . .  ,m. 


Then  among  all  nonnegative  functions  d  such  that 


m 


(3.4.2)  Q[d(x)]  <_  ^aiQ(xi)  for  all  q  e  Sf, 

i=l 


the  largest  is 
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A  necessary  and  sufficient  condition  on  the  a^  that  d  of  the  form 
(3.4.3)  satisfy  (3.4.2)  is  that  (3.4.1)  hold. 

Proof .  We  use  the  result  of  Marshall.  Let  y  ■  v-o  be  the 

difference  of  two  positive  measures.  We  choose  v  so  that 

00 

I  qdv  *  £a.Q(x.),  by  taking  v.  as  the  unique  measure  such  that  the 
0  1  1  1 

measure  of  the  interval  (0,x)  is  x^x  <  x^f  and  set  v  =  Ea^v^. 

(We  make  the  convention  that  a  summation  without  limits  is  over  the  range 

00 

1  to  m.)  We  also  choose  a  so  that  /  qdo  *  Q[d(x)]  by  letting  the 

0 

o  measure  of  the  interval  (0,x)  be  xfx  <  d(x)|.  Thus  from  Lemma  1 
we  have  that  (3.4.2)  holds  iff  h(t)  >  0  for  all  t  >  0  where 


h(t)  =  Laifxi  >  t|[R(x1)-R(t)]  -  ft  <  d  (x,)]  [R(dx)-R(t)  ] . 


It  is  clear  that  we  must  have 


(3.5.1)  0  <  d(x)  <  x  , 

—  ~  —  m 

otherwise  we  would  have  h(t)  <  0  for  x  <  t  <  d(x).  Now  we  examine 

m  ~ 

the  right-hand  derivative 

h’(t)  =  -r(t)dy(t)  =  r  (t )  [ft  <  d(x)|  -  Ea1(xi  >  t|] . 

h’(t)  =  -r(t)Ia  fx  >  t|,  d(x)  <  t  <  x 

i  i  ~  —  —  m 

h'(t)  =  r(t)[l  -  Laifxi  >  tf]  0  1  t  1  d(x)  • 
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Clearly,  since  Aj 
t  >  0  that 


iAj  i1 


for  j=l , . 


,m  implies  for 


(3.5.2)  h(t)  is  increasing  for  t  <  d(x),  h(t)  is  decreasing  for  t  >  d(x). 

Since  h(t)  =  0  for  t  >  x  we  must  only  check  that 

m 

h (0)  =  £a,R(x.)  -  R[dx]  >  0. 

li  ~  — 

Since  R  ^  exists  and  is  order  preserving,  it  follows  that 

d  (x,)  1  R  1[Ea1R(xi)] 

and  the  largest  value*  of  d  is  obtained  at  equality. 

Now  if  (3.4.3)  holds  we  claim  (3.4.1)  is  a  necessary  and  sufficient 
condition  for  (3.4.2).  That  it  is  sufficient  we  have  shown  above.  To 
show  necessity  we  realize  by  Lemma  1  that  (3.5.1)  must  follow  and  hence 
that 


0  <  la ,R(x. )  <  R(x  ) 
—  1  1  -  m 


must  hold  for  arbitrary  0  <  x^  <•••<  x^  <  «=.  But  by  proper  choice  of 
the  x^  we  see  it  is  necessary  that 


0 


<  1 


must  hold  for  j*l,...,m.| 
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We  now  have  the 

Corollary  1.  If  in  the  hypothesis  of  Theorem  2  we  replace  Sr 
by  either  1^  or  we  merely  replace  the  R  in  the  conclusion 

(3.4.2)  by  R#. 

Proof.  Choose  p,  o,  v  exactly  as  before.  First  consider 
q  e  Ir»  We  must  find  the  largest  d  such  that  for  all  t  >  0 

00 

h.  (t)  »  f  x r(x)dv(x)  >  0. 

1  t 

Now  clearly  the  argument  goes  through  exactly  as  before  except  that  we 
replace  r(t)  by  t*r(t)  and  hence  R  by  R^. 

Now  consider  q  e  C^.  We  now  must  find  the  largest  d  such  that 
the  function 


h2(t)  -  J  (x-t)r(x)dp(x)  >  0 


for  all  t  >  0. 


But  we  see  that 


h’(t) 


00 


For  any  given  d(jc)  <  x^,  we  have  previously  seen  from  (3.5.2)  that  h(t) 
is  unimodal  with  mode  at  d(x)  and  decreases  to  zero  for  t  >  x  .  Therefore, 
since  h(0)  <  0  is  yet  possible  h(t)  can  cross  zero  at  most  once.  Thus 
h2  must  also  be  either  unimodal  or  monotone.  We  note  that  also 
ultimately  decreases  to  zero  and  so  we  must  assure  ourselves  only  that 


So  our  best  choice  of  d  must  be  the  one  specified.  | 


Corollary  2.  If  in  the  hypothesis  of  Theorem  2  we  replace  q  e 
by  Q  e  SR,  then  we  replace  (3.4.1)  by  the  condition:  for  some 
k— 1 , . . .  , m 

(3.5.4)  0  <  <•••<  Ak  <  1,  A^+1  *• • ■  0,  and  0  <  A^. 

Proof .  Making  the  proper  identification  of  the  measures  v,o  as 

before,  we  obtain 

00 

h„(t)  =  j  Rdy  >_  0  for  all  t  ^  0, 
t 

as  a  necessary  and  sufficient  condition  that 

Q(dx)  <_  IaiQ(xi)  for  all  Q  e  SR. 
m 

Recall  A  *  /a.  for  j=l,...,m,  now  fix  a-,..., a  so  as  to  satisfy 

J  i^j  1  1  m 

(3.5.4) ,  which  is  equivalent  with 

*li° . ak-l  -  0  ak+l . am  '  0 


where 


f 
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k 

0  c  a,  <  1  a«d  0  <_  1. 

k  1 


Integration  shows 

h3(t)  «  zft  <  xi|aiR(xi)  -  |t  <  d(x)|R(dx). 

We  see  that  we  must  have  d  (sc )  <_  x^,  the  index  being  the  same  as  that 
above,  otherwise  for  x^  £  t  <  d(.x)  we  would  have  h^Ct)  »  -R(djc)  <  0. 
Clearly,  for  t  >  x^,  h^(t)  *  0,  while  for  dQc)  <_  t  <  x^ 

h^(t)  -  £ft  <  x^fa^R(x^)  >  0  which  is  an  increasing  function  of  t. 

But  since  h_(t)  is  also  increasing  for  0  <  t  <  d(x)  we  see  that 
h^(t)  0  for  all  t  0  iff  h3(0)  =  EajR(x)  -  R(dx)  >_  0  and  the 

largest  value  of  d  that  accomplishes  this  is  (3.4.3). 

For  the  second  part  of  the  proof  we  assume  that 

d(x)  =  R  *[ Za .R(x , ) ] ,  h,(t)  >  0  for  all  t  >  0. 

~  li  j  —  — 

If  we  let  yi  =  R^),  s  =  R(t),  the  above  is  equivalent  with 

(3.5.5)  zfs  <  yi§aiyi  fs  <  5'aiyiiZ'aiyi  for  a11  s  i  0i 

We  must  show  that  if  (a.,..., a  )  is  such  that  (3.5.5)  holds  for  all 

1  m 

0  <  ym  <  «>,  then  for  some  k=l,...,m  we  have 

\+l . Am  "  0  <  V 


we  see 
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Since  clearly  we  must  have  0  <_  za^y^  <_  y^,  by  fixing  y^ 
the  linear  form  la^y^  attains  a  maximum  as  a  function  of  yi»,,**ym-i 
on  the  simplex  0  <_  y^  <_•••<_  y  .  Let  k  <_  m  be  the  least  index  such 
that 


m 

(3.5.6)  0 1  2  Vi  I  \ 

i=l 

for  all  (y^» • . . »ym_, )  in  that  region.  It  follows  immediately  letting 

all  y^  -*•  ym  in  (3.5.6)  and  cancelling  that  >_  0.  In  the  same 

manner  letting  y^  -*  y^,  y^_^  ^  0  we  see  <_  1.  Again  letting 

y.  ->  0  and  y,,.  ->  y  for  j=k+l,...,m  we  obtain  A,  ,.*•••»  A  =  0. 
j  j+i  m  k+l  m 

Now  we  pick  0  <  y^  <•••<  y^  such  that 


(3.5.7) 


yk-l  <  Zaiyi  -  yk' 


From  (3.5.5)  consider  s  <  Ea^y^  and  take  y^  <  s  <  y2  and  we  obtain 
-a^y^  0  and  therefore  a^  0.  But  Ea^y^  increases  for  y^ 

decreasing  to  zero  so  the  index  k  defined  by  (3.5.7)  does  not  decrease 
if  we  take  y^  =  0.  Again  from  (3.5.5),  consider  s  <  Ea^y^  and  take 
y2  <  s  <  y^.  We  conclude  as  before  a2  <_  0.  Continuing  in  this  fashion 
we  obtain  a^  0,...,a^_^  <_  0,  from  which  we  conclude  Al<...<V  To 
see  that  a^  >  0  we  suppose  otherwise  and  show  that  (3.5.5)  is  violated 
for  s  >  Ea^.  |  | 


We  now  state  the 


m 

THEOREM  3.  If  Q(djjc)  <_  £  a^Q(x^)  for  some  real  a^,  and  all  x 
then  we  have  and  y^  as  sharp  bounds  for  the  assurance  a  and  the 
confidence  y, 


(3.6.1)  a  > 


—  m 


IT  (1+nb  ) 
j-1  2 


a0  Y  >  P 


$Vj  <tai)  "yo 


m 

where  b.  ■  A. /(m-j+1),  A.  *  ^a.  and  Z.  are  Independent  exponential 
1  J  J  i-4 


random  variables  with  mean  1. 


Proof.  By  definition  from  (1.1) 


0<x,<*»*<x  <® 
1  m 


J  ml 


exp 


m 


-nQ[dx]  -  Y,  Q(xi> 


m 


HdQ(x.). 

1 


By  using  the  result  (3.4.1)  and  setting  y^  ■  Q(x^) 


0  i  ao  ■  m!  / 


0<y,  < • • • <y  <® 

'1  7m 


/ 


exp 


m 


-  £u+na  )y 

i 


ndy . 


a. 


m 


: -  f 

nA_)  L 


(1+nA  )  Jn  1  exp 

m  0<y,  <*,,<y  ,  <°o 

1  'm-1 


/■ 


m-2 
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Repeating  this  integration  we  finally  obtain 


m! 

a  *  - 

o  m 

"]  |~  (m+l-j+nA, ) 

j-1  2 


which  is  the  result  claimed  for  a  .  It  follows  from  (1.2)  that 


y  .  P[e-«(d^  >  8]  >  i  In  ±|-  Y0 


by  letting  Y.  *  Q(X  )  be  the  ordered  observation  from  the  expo- 
I  ,m  1  ,m 

nential  distribution  with  mean  1.  But  since 


i,m 


m 


)b  (m-j+l)(Y  -Y  ) 
'  J  3 »m  J-1*™ 


where  Y_  “0  and 

0,m 


(m  "  zj  i  "  1 . m 

are  independent  exponentially  distributed  with  mean  1  we  have  the 
result. | | 


We  now  derive  a  formula  which  is  useful  in  computing  the  exact 
confidence  bound  for  small  values  of  m.  By  definition  of  the  distri¬ 
bution  of  the  Z^  we  have 


-t/b 


1 


(3.6.2) 


P[b1Z1  <t]»l-e 


t  >  0 


and  by  straightforward  integration  we  find 


b2  -t/b.  b  “t/b. 

(3.6.3)  P[b, Z,+b0Z0  <.  t]  =*  1  +  e  -  ,  .  e 

1  i  l  2  b  -b_  b,-b. 


1  2 


'1  2 


Define 


,<2) 


,(2) 


-b. 


brb2  ’ 


brb2 


Lemma  2 .  If  Z^,...,Z^  are  independent  exponential  random 


variables  with  unit  mean  then  for  b^  >  0 


,  k  ,  V  (k)  -t/b 


where  we  have  the  recursion  relations  holding: 


=  1  and  for  k  >  1 


(3. 6. A) 


B(k> .  BjCk-1>bj/(b:1-bk)  j-i . k-i 

k-1 


B<k)  -  1 
k 


-  S-™ 

j-1  J 
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Proof.  We  shall  give  an  induction  on  k.  Clearly  the  result  is 
true  for  k  =  1,2.  Assume  the  assertion  true  for  (k— 1) .  Now 


which  completes  the  proof. 


We  also  set  out  the  special  case  as 

Corollary  3.  Let  q  e  then  fix  k°l,...,m  and  0  <  p  <  1,  now  define 

ai  «  p/m  i  -  1, . . .  ,k-l 

ak  "  (p/m) (m-k+1) 

■  0  i  ■  k+1 , . . . ,m 


and  we  have 
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a 

o 


1 


<1  +  ^> 


k 


y 


0 


,-2m£n8 

P 


where  is  the  Chi-square  distribution  with  2  k  degrees  of  freedom. 

See  Reference  [1]  in  this  connection. 


Proof.  By  the  preceding  result  we  see  that 


m 


i-j 


(p/m) (m-j+1)  j=l,...,k 


j*k+l  , . . .  jin 


hence  satisfy  (3.4.3).  Now  we  see  that 


bj  ■  p/m  j*l , . . . ,k 


*  0  j  »k+l , . . . , m 

and  by  direct  substitution  into  the  results  of  Theorem  3  we  have  the 
result  as  claimed. | | 


We  remark  that  the  results  of  Theorem  1  are  a  specialization  of 

Theorem  3,  with  a  slight  change  of  notation.  Also,  we  can  use  the  nor- 

k 

mal  approximation  to^b.Z  for  k  of  moderate  size  if  the  b  are  not 

1  1  1  1 
too  different  in  value. 


4.  SOME  NUMERICAL  COMPARISONS 

In  order  to  appreciate  the  effect  of  the  various  assumptions  con¬ 
cerning  the  failure  rate  on  the  derating  function  we  shall  examine 
several  simple  cases. 


Q  e  S 


1 


Case  1 


£ 


-w'< 
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We  take  0  <  p  <  1  and  set 


a^  *  -p,  ■  p  aj  ■  0  for  j  *  3,...,m 


then 


A2  *  P  Aj  ’  0  £or  *  *  2‘ 


d(x)  *  p(x  -x^. 


Clearly  these  satisfy  (3.5.4)  and  we  have  by  (3.6.1)  and  (3.6.3), 

letting  t  =  -  S,n8, 


n  =  a 

^  _ —  p  0 

m-l  H 


1  _  e“(m-l)t/p 


Thus  if  we  prescribe  otQ  near  unity,  then  we  must  choose 


(4.1) 


m-l  ,  1  .v 
P°o  •  1)1 


Thus  for  example,  for  m  *  10,  n  *=  200  and  oi^  -  .99,  we  have 


from  (4.1) 


P  "  2200  ' 

We  see  that  a  high  assurance  for  a  moderate  fleet  size  must  have  an 
extremely  small  multiplication  factor. 


If  we  prescribe  6  and  Yq»  then  determine  p  we  have 


(m-l) ftnB 

\ '  ‘"U-V  ‘ 


(4.2) 
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If  we  set  8  *  .99  *  Yq  for  m  *  10,  then  from  (4.2)  we 
obtain 

9 ( . 01 )  1 

P  "  n  100  51.1  ‘ 

Thus  the  assurance  requires  a  factor  which  is  of  the  order  ^  smaller 
than  the  confidence  does. 


Case  II 


q  e  S 


<-l 


,  1  x  K 


take  0  <  p  <  (— )  and  set 


al  =  a2 


a^  4  0  i  ■  3, . . .  ,m. 


Then 


K  < 

=  2p  ,  =  p  ,  Aj  =  0  for  j  =  3,...,m. 


These  A^  satisfy  (3.4.3)  and 


d(x)  *  p(x£  +  xp  . 


Now,  by  (3.6.1) 

(4.3)  a  *  n  <  n 

0  4  +  -  2p<)(l  +  -2- 


m 


2P  )  (l  +  -fr  P  ) 
m-i 


K  K 

and  using  (3.6.3)  with  t  =  -toB,  b.  =  — b0  -  r, 

i  m  z  m-i 

r0 

P  2p 


(4.4) 
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If  we  prescribe  a n  near  1  and  set  p  «  -  1  then  solving 

u  ot  _ 

0 

(A. 3)  for  pK  yields 


(A. 5) 


P  = 


<  _  -3m+2  +  ^9+8p)m*~-(12+8p)  +  A 


An 


If  we  expand  the  right-hand  side  of  (A. 5)  in  a  Maclaurin's  series  in 
P  and  retain  only  the  first  two  terms,  we  have  the  approximation 


(A. 6) 


1 

m(m-l)o  k 
n(3m-2) 


For  n  =  200,  m  =  10,  aQ  =  .99  we  have  from  (A. 6) 


P 


560(11) 


1 

8.8 

if 

K 

■  A 

1 

A. 3 

if 

< 

=  6 

1 

3 

if 

< 

-  8 

The  reciprocal  of  p  is  sometimes  called  the  scatter  factor  and  is 
usually  taken  between  2  and  A.  Here  we  can  see  how  strong  an  assumption 
is  necessary  to  justify  scatter  factors  of  such  magnitude. 

If  we  prescribe  near  1,  then  from  (A. A)  we  have 


In 


(m-2) (1“Yq) 
2(m-l) 


mt 


2P 


+  Jin 


2 (m-1)  exp 


(3m-2)t 

2pK 
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and  by  neglecting  the  second  term  on  the  right-hand  side  of  the 
equation  we  have  the  approximation 


(4.7) 


mJlnB  1 

2  to 

fra-2)  (1-y0) 

2m- 2 

For  in  «  10,  Yq  =  .99  and  8  near  1  we  have 


1-B 

1.083 


1 

< 


9 


B  so  that  if  we  set  B  *  .99, 


P  * 


1 

2.2 


if  <  -  4 

if  k  —  6 


but  if  we  set  8  =  .999 


P  * 


1 

5.7 


1 

3.2 


if  <  =  4 

if  <  =  6  . 


■M'cW— 
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